Asst Certification & Projects Manager (Regulatory Audit and Compliance role)
- Compensation
- Not disclosed
- Location
- Bedok, East Region
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Not specified
- Posted
Skills
Must have
- Tertiary qualifications in Computer Science, Information Technology or related degree / diploma.
- Possess relevant professional certifications such as ISO 27001/22301 Internal Auditor or Lead Auditor, Certified Internal Auditor (CIA), CISA or equivalent would be an advantage.
- Minimum 3 years of relevant audit experience will be preferred.
- Knowledge of relevant ISO standards, industry certifications, and regulatory compliance requirements, including applicable MAS guidelines and PDPA requirements.
- Ability to coordinate internal, external, regulatory and customer audits effectively.
- Strong analytical skills with high attention to details.
- Proactive and adaptable with good organisational and interpersonal skills
- Ability to exercise objective judgement with strong logical and critical thinking skills.
- Proficiency in Microsoft Office applications, particularly Excel, Word and PowerPoint, for audit documentation, compliance tracking and management reporting.
- Self-motivated team player with a positive attitude towards continuous learning and improvement.
- Positive work attitude, with high level of commitment and initiative.
- Good written and verbal communication and presentation skills.
- Maintain high level of integrity and professional standards.
- Working location : 1-Net (East) at Chai Chee / 1-Net (North) Woodlands.
Full description
This role requires the individual to support certification audit and compliance programs involving certification management, compliance management, regulatory compliance, audit management, risk management, policy management, security awareness and training.
Key Responsibilities & Challenges1. Certification Management & Regulatory Compliance
Coordinate and manage certification audits, renewals and compliance activities covering ISMS, BCMS, PCI-DSS, OSPAR, bizSAFE, Cyber Trust Mark and other applicable standards and frameworks.
Support compliance with applicable regulatory requirements, including PDPA and coordinate Threat and Vulnerability Risk Assessments (TVRA).
Liaise with certification bodies external auditors and internal stakeholders to ensure timely completion of certification and compliance activities.
Maintain certification records, compliance documentation and renewal schedules to ensure continuous audit readiness.
2. Internal & External Audit Management
Assist in developing and coordinating annual internal and external audit plans, programmes and schedules.
Coordinate audit activities, including audit planning, fieldwork, documentation, reporting and follow-up actions.
Prepare and consolidate audit evidence, supporting documents and data analysis to facilitate assessments of business processes, risk management, internal controls and governance practices.
Assist in evaluating audit findings, identifying control weaknesses, conducting root cause analysis and recommending corrective actions and process improvements.
Prepare audit reports, findings summaries and presentation materials for Management and the Steering Committee.
3. Audit Findings & Corrective Action Management
Coordinate with relevant departments to obtain management responses and develop corrective action plans for identified audit findings and compliance gaps.
Monitor and follow up on outstanding internal and external audit findings to ensure timely implementation of corrective and preventive actions.
Assist in validating the effectiveness of remediation measures and verifying closure of audit findings.
Maintain audit findings trackers and escalate overdue or unresolved issues to Management.
Follow up with relevant departments to strengthen compliance, process consistency and operational effectiveness.
4. Customer Audit & Compliance Support
Serve as the primary coordinator for customer audits, security assessments, compliance reviews and due diligence requests relating to data centre operations.